aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLuis Ressel <aranea@aixah.de>2018-10-24 01:14:28 +0200
committerJason Zaman <jason@perfinion.com>2018-11-18 18:59:17 +0800
commitfd2f4ebf4bfebbf0660ea15a84a9e5fd9db217b8 (patch)
treefe609a80ecabc8d030889c3b9c9ad35ea0886cc8
parentMerge upstream (diff)
downloadhardened-refpolicy-fd2f4ebf4bfebbf0660ea15a84a9e5fd9db217b8.tar.gz
hardened-refpolicy-fd2f4ebf4bfebbf0660ea15a84a9e5fd9db217b8.tar.bz2
hardened-refpolicy-fd2f4ebf4bfebbf0660ea15a84a9e5fd9db217b8.zip
Allow portage_sandbox_t to read /proc/sys/vm/overcommit_memory
git uses this. Signed-off-by: Jason Zaman <jason@perfinion.com>
-rw-r--r--policy/modules/admin/portage.te2
1 files changed, 2 insertions, 0 deletions
diff --git a/policy/modules/admin/portage.te b/policy/modules/admin/portage.te
index 33547b6e..bdf5d412 100644
--- a/policy/modules/admin/portage.te
+++ b/policy/modules/admin/portage.te
@@ -515,6 +515,8 @@ gen_tunable(portage_enable_test, false)
dev_getattr_xserver_misc_dev(portage_sandbox_t)
+ kernel_read_vm_overcommit_sysctl(portage_sandbox_t)
+
tunable_policy(`portage_enable_test',`
# lots of tests connect over loopback
corenet_tcp_bind_all_unreserved_ports(portage_sandbox_t)